This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: WdbwMc9DvuujVY9W8B8S7hAhkxiTS1RWcxLA+0g2ki4= Subject key identifier: A4:71:1E:2A:4E:A9:C7:88:C8:87:71:53:2D:BE:5E:4C:94:29:36:CE Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584BC53AF7D947365B432BA51620 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 9009 IP address blocks: 72.18.92.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f7:d9:47:36:5b:43:2b:a5:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=76f10ef8-8fcf-4d83-99a0-f58a582dbf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:78:37:ea:f6:33:15:25:7f:26:fe:83:b9: 05:1a:8a:3c:42:60:06:6b:93:c4:a9:eb:d9:1d:3f: 75:fd:7f:31:b1:1c:c7:31:1c:94:84:ed:22:6a:56: f4:98:d8:0b:ac:13:c4:99:50:20:17:5c:df:ec:67: f4:bb:a5:77:8d:3c:1a:6f:4c:27:0a:dd:46:e9:5d: 2b:7b:aa:af:e5:e9:a7:b2:9e:e2:6c:d2:4c:3c:de: 4b:45:af:50:3b:3a:48:a0:f8:46:6d:94:c4:de:23: 59:19:f4:aa:a1:be:eb:85:e9:3a:98:11:fc:1e:19: 1a:d5:19:81:5e:9b:14:7b:5d:7c:d3:c8:38:25:d5: 62:4a:6d:28:31:a2:e6:ab:4a:9d:48:1a:7c:2a:97: 6e:fa:71:32:22:e2:39:5b:aa:e6:98:90:5a:ea:98: 81:b3:34:54:35:a2:eb:98:37:dd:dd:87:78:dd:e8: 58:48:dd:80:27:c8:18:71:da:49:db:35:26:4f:c4: a5:84:e9:b6:f1:a9:27:16:00:9f:38:84:cf:2a:85: 01:56:2e:74:d6:74:12:c4:06:0f:45:e4:89:0a:30: 31:ee:45:b6:55:6d:19:fe:06:1a:9f:96:e0:9b:1a: c5:04:b7:47:1e:8c:b5:a9:18:01:7d:28:68:8f:18: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:1E:2A:4E:A9:C7:88:C8:87:71:53:2D:BE:5E:4C:94:29:36:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:43:9e:8c:c8:ba:fd:39:12:8a:d4:e0:49:ec:b7:f3:90:39: 4a:6d:6c:e3:b4:22:1f:00:58:f2:47:7f:07:ce:fa:5b:1b:3d: 5c:94:a9:76:28:1c:c8:a5:b1:e0:df:0a:5a:eb:fd:03:21:aa: 7b:ec:98:a9:43:9a:ae:eb:22:4c:c7:1d:c7:b5:15:50:b5:a9: 27:46:4e:99:97:de:68:97:60:c4:65:ac:d7:88:35:d4:78:c0: 78:79:17:9a:d5:3c:45:ad:e9:9c:80:e7:7b:aa:e8:14:39:b6: b8:55:c8:d4:ff:7e:63:34:d0:3f:eb:90:26:2f:32:d6:ad:2d: 1d:0a:02:9c:97:7a:37:24:0c:10:9f:29:d6:01:f7:82:6b:d3: 0e:1b:e6:36:17:7d:97:67:85:24:a0:2d:b9:eb:13:29:b9:01: 4c:f1:0f:2c:ae:88:f1:4a:c9:ca:56:06:aa:2f:da:68:b6:b7: bb:12:bf:6d:f5:b4:d5:38:83:a8:97:bf:8b:3f:c3:73:b3:4e: 16:62:a2:46:1e:73:7c:fb:b8:52:43:ff:b2:46:cf:bf:46:fd: e9:a7:72:31:e5:44:e1:61:31:a1:4a:e9:81:5a:58:a4:b1:1a: f4:95:3f:c3:92:c2:55:dd:a4:42:ef:60:38:fd:00:74:f3:82: 24:71:9d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvfZRzZbQyulFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzZmMTBlZjgtOGZjZi00ZDgzLTk5YTAtZjU4YTU4MmRiZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCd4N+r2MxUlfyb+g7kFGoo8QmAGa5PEqevZ HT91/X8xsRzHMRyUhO0ialb0mNgLrBPEmVAgF1zf7Gf0u6V3jTwab0wnCt1G6V0r e6qv5emnsp7ibNJMPN5LRa9QOzpIoPhGbZTE3iNZGfSqob7rhek6mBH8Hhka1RmB XpsUe11808g4JdViSm0oMaLmq0qdSBp8Kpdu+nEyIuI5W6rmmJBa6piBszRUNaLr mDfd3Yd43ehYSN2AJ8gYcdpJ2zUmT8SlhOm28aknFgCfOITPKoUBVi501nQSxAYP ReSJCjAx7kW2VW0Z/gYan5bgmxrFBLdHHoy1qRgBfShojxh7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRxHipOqceIyIdxUy2+XkyUKTbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApDnozIuv05EorU4Enst/OQOUptbOO0Ih8AWPJHfwfO+lsbPVyUqXYo HMilseDfClrr/QMhqnvsmKlDmq7rIkzHHce1FVC1qSdGTpmX3miXYMRlrNeINdR4 wHh5F5rVPEWt6ZyA53uq6BQ5trhVyNT/fmM00D/rkCYvMtatLR0KApyXejckDBCf KdYB94Jr0w4b5jYXfZdnhSSgLbnrEym5AUzxDyyuiPFKycpWBqov2mi2t7sSv231 tNU4g6iXv4s/w3OzThZiokYec3z7uFJD/7JGz79G/emncjHlROFhMaFK6YFaWKSx GvSVP8OSwlXdpELvYDj9AHTzgiRxnWE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:38 2025 by rpki-client